Data Breach Today

NOVEMBER 24, 2023

Parliamentarians Pass Resolution Calling For Immediate Executive Branch Action European lawmakers slammed the EU executive branch's inaction after a parliamentary committee called for tougher rules designed to prevent spyware abuse across the trading bloc. More than half of European Parliament lawmakers backed a resolution demanding rapid action.

288

288

Security Affairs

NOVEMBER 24, 2023

Almost a million files with minors’ data, including home addresses and photos were left open to anyone on the internet, posing a threat to children. During a recent investigation, the Cybernews research team discovered that IT company Appscook – which develops applications used by more than 600 schools in India and Sri Lanka for education management – leaked a staggering amount of sensitive data, including photos of minors, home addresses, and birth certificates, due to a misconfiguration

Risk 119

Risk Education Personal data Phishing 119

Data Breach Today

NOVEMBER 24, 2023

Also: Advice for the Next White House Cyber Director; CISOs' Liability Concerns In the latest weekly update, the former federal CISO, Grant Schneider, joins three editors at ISMG to discuss important cybersecurity issues, including advice for the next White House cyber director, and liability concerns facing CISOs following SolarWinds and its CISO being accused of fraud.

Security 284

Security Cybersecurity IT 284

Security Affairs

NOVEMBER 24, 2023

Researchers warn of publicly exposed Kubernetes configuration secrets that could pose a threat of supply chain attack for organizations. Aqua Nautilus researchers warn of publicly exposed Kubernetes configuration secrets that put organizations at risk of supply chain attacks. The experts noticed that these misconfigurations impact hundreds of organizations and open-source projects.

Passwords 118

Passwords Blockchain Access Data breaches 118

Advertisement

Many organizations today are unlocking the power of their data by using graph databases to feed downstream analytics, enahance visualizations, and more. Yet, when different graph nodes represent the same entity, graphs get messy. Watch this essential video with Senzing CEO Jeff Jonas on how adding entity resolution to a graph database condenses network graphs to improve analytics and save your analysts time.

Analytics

Data Breach Today

NOVEMBER 24, 2023

1.5 Million Customers' Details Stolen From Taj Hotel Chain, Attacker Claims Hospitality giant Indian Hotels is probing the alleged theft of data from its systems after a criminal recently claimed they stole data pertaining to 1.5 million customers of the Taj hotel chain in 2020, which they're now advertising on a popular English-language cybercrime forum.

Data breaches 279

Data breaches IT 279

IBM Big Data Hub

NOVEMBER 24, 2023

Application modernization is the process of updating legacy applications leveraging modern technologies, enhancing performance and making it adaptable to evolving business speeds by infusing cloud native principles like DevOps, Infrastructure-as-code (IAC) and so on. Application modernization starts with assessment of current legacy applications, data and infrastructure and applying the right modernization strategy (rehost, re-platform, refactor or rebuild) to achieve the desired result.

Cloud 96

Cloud Customer Experience Mining Marketing 96

Security Affairs

NOVEMBER 24, 2023

Microsoft announced this week it will pay up to $20,000 for security vulnerabilities in its Defender products. Microsoft launched its new Microsoft Defender Bounty Program with a focus on Defender products and services. The company will pay up to $20,000 for the vulnerabilities in its Defender products. The bug bounty program starts with Defender for Endpoint APIs, but other products will be covered by the company program. “The Microsoft Defender Bounty Program invites researchers across t

IT 115

IT Security Information Security 115

Schneier on Security

NOVEMBER 24, 2023

A new worm that spreads via USB sticks is infecting computers in Ukraine and beyond. The group­—known by many names, including Gamaredon, Primitive Bear, ACTINIUM, Armageddon, and Shuckworm—has been active since at least 2014 and has been attributed to Russia’s Federal Security Service by the Security Service of Ukraine. Most Kremlin-backed groups take pains to fly under the radar; Gamaredon doesn’t care to.

Communications 91

Communications Government Security IT 91

WIRED Threat Level

NOVEMBER 24, 2023

Security researcher Barrett Lyon, who makes visualizations of the internet's network infrastructure, is back with a new piece chronicling the rise of the IPv6 protocol.

Security 85

Security 85

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

IT

Schneier on Security

NOVEMBER 24, 2023

It’s realistic looking. If I drop it in a bin with my keys and wallet, will the TSA confiscate it?

IT 82

IT 82

CILIP

NOVEMBER 24, 2023

SCONUL supports Green Libraries The Society of College, National and University Libraries (SCONUL), has joined the Green Libraries Campaign as a partner organisation. The Green Libraries Campaign is the next phase of the Green Libraries Partnership, which connected libraries across England through the national Green Libraries Week campaign, allocated funding that enabled libraries to launch green activities, and ran the inaugural Green Libraries conference for knowledge sharing and green network

Libraries 52

Libraries Government 52

IG Guru

NOVEMBER 24, 2023

Check out the article here. The post How to Automate the Hardest Parts of Employee Offboarding via The Hacker News first appeared on IG GURU.

Information governance 75

Information governance Risk Government Information Security 75

IT Governance

NOVEMBER 24, 2023

An interview with an award-winning author. Alan Calder, the CEO of GRC International Group PLC, IT Governance’s parent company, was recently awarded the Best Cyber Book of the Year award at The Real Cyber Awards 2023 for his new book Cyber Resilience – Defence-in-depth principles. To mark the occasion, we sat down with him for this special interview.

Government 113

Government Risk Compliance Security 113

Advertisement

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

Risk

Schneier on Security

NOVEMBER 24, 2023

Pretty photograph. The Squid Nebula is shown in blue, indicating doubly ionized oxygen—­which is when you ionize your oxygen once and then ionize it again just to make sure. (In all seriousness, it likely indicates a low-mass star nearing the end of its life). As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Security 81

Security IT 81

Security Affairs

NOVEMBER 24, 2023

Researchers reported that a Hamas-linked APT group is using a Rust-based SysJoker backdoor against Israeli entities. Check Point researchers observed a Hamas-linked APT group is using the SysJoker backdoor against Israeli entities. In December 2021, security experts from Intezer first discovered the SysJoker backdoor, which is able to infect Windows, macOS, and Linux systems.

IT 100

IT Security Information Security 100